Xenomorph Banking Trojan Targets Over 100 Finance Apps to Steal User Credentials
-
The Xenomorph banking trojan targets over 100 banking and crypto apps and uses overlays to steal credentials.
-
It is distributed via phishing sites posing as Chrome update notifications with malicious APK files.
-
It targets users in the U.S., Canada, Spain, Italy, Portugal and Belgium.
-
The malware comes with preloaded overlays for popular banking and crypto apps based on location.
-
Avoid it by only downloading apps from official stores, not sideloading, and using a good antivirus app.